apps can requireEditor, requireTrusted, requireAdmin